chore(ci): minimal CI job 3

Author: mandarini

.github/workflows/publish.yml

@@ -1,10 +1,10 @@
-name: Minimal App Token Push & PR Test
+name: Minimal App Token Release & PR Test
 
 on:
   workflow_dispatch:
 
 jobs:
-  push-and-pr-test:
+  release-stable-pr:
     runs-on: ubuntu-latest
     steps:
       - name: Generate App token
@@ -18,31 +18,21 @@ jobs:
         with:
           fetch-depth: 0
 
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci --legacy-peer-deps
+
       - name: Configure git user
         run: |
           git config --global user.name "supabase-releaser[bot]"
           git config --global user.email "supabase-releaser[bot]@users.noreply.github.com"
 
-      - name: Remove credential helpers and set remote
-        run: |
-          git config --global --unset credential.helper || true
-          git config --local --unset credential.helper || true
-          git remote set-url origin https://x-access-token:${{ steps.app-token.outputs.token }}@github.com/supabase/supabase-js.git
-
-      - name: Create and push branch
-        run: |
-          git checkout -b minimal-token-test
-          touch minimal.txt
-          git add minimal.txt
-          git commit -m "test: minimal token branch push"
-          git push origin minimal-token-test
-
-      - name: Create PR with gh CLI
+      - name: Run release-stable script
         env:
+          RELEASE_GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
           GH_TOKEN: ${{ steps.app-token.outputs.token }}
-        run: |
-          gh pr create \
-            --base master \
-            --head minimal-token-test \
-            --title "Minimal token push test" \
-            --body "Automated PR from minimal App token workflow"
+        run: npm run release-stable

scripts/release-stable.ts

@@ -24,7 +24,10 @@ import { execSync } from 'child_process'
   const authHeader = `AUTHORIZATION: basic ${Buffer.from(`x-access-token:${process.env.RELEASE_GITHUB_TOKEN}`).toString('base64')}`
   execSync(`git config --local http.https://github.com/.extraheader "${authHeader}"`)
 
-  // [Your code for changelog/tagging or npm publish goes here...]
+  // ---- RELEASE LOGIC ----
+  // Insert your release logic here (e.g. changelog, tagging, npm publish, etc.)
+  // Example:
+  // execSync('npm run release-build-or-tag-step-here')
 
   // Restore the header (if it existed) and GH token
   if (originalAuth) {
@@ -39,9 +42,6 @@ import { execSync } from 'child_process'
   process.env.GITHUB_TOKEN = process.env.RELEASE_GITHUB_TOKEN
 
   // Remove ALL credential helpers to ensure only our token is used
-  try {
-    execSync('git config --system --unset credential.helper || true')
-  } catch {}
   try {
     execSync('git config --global --unset credential.helper || true')
   } catch {}
@@ -55,11 +55,12 @@ import { execSync } from 'child_process'
     execSync(`git remote set-url origin "${remoteUrl}"`)
   }
 
-  const branchName = `release-test`
+  // Use a descriptive branch name for the release
+  const branchName = `test-pr-create`
 
   try {
     execSync(`git checkout -b ${branchName}`)
-    // create a small file and git add it
+    // create a small file and git add it (replace with actual release changes)
     execSync('touch test.txt')
     execSync('git add test.txt')
 
@@ -74,13 +75,14 @@ import { execSync } from 'child_process'
 
     // Open PR using GitHub CLI (GH_TOKEN is automatically picked up in CI)
     execSync(
-      `gh pr create --base master --head ${branchName} --title "chore(repo): test permissions" --body "chore(repo): test permissions"`,
+      `gh pr create --base master --head ${branchName} --title "chore(repo): automated release" --body "Automated release PR from script"`,
       { stdio: 'inherit' }
     )
 
-    // Enable auto-merge
+    // Enable auto-merge (optional, remove if you want manual review)
     execSync(`gh pr merge --auto --squash`, { stdio: 'inherit' })
   } catch (err) {
     console.error('❌ Failed to push release branch or open PR', err)
+    process.exit(1)
   }
 })()